
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
piplayer
Advanced tools
NOTE: In progress!! Come back later!
A relatively easy-to-use utility to set up one or more RaspberryPi's as a video player.
PiPlayer will install vlc on your Pi(s), transfer videos, and set them to play on startup.
You should have one or more Pi's on your local network. The Pi's should have:
On your computer, install PiPlayer with:
pip install piplayer
You can send one or more videos directly to individual Pi's like so:
piplayer --host HOSTNAME --video VIDEONAME.mp4
This will transfer the video file(s) to the Pi, and make them play on startup in a loop. The --video option can take multiple video files.
For more complex scenarios, you can also create project instructions as a YAML file. Here's an example project file:
players:
- host: player1.local
videos: vid1.mp4
- host: player2.local
videos: ["vid2.mp4", "vid3.mp4"]
To use:
piplayer --project PROJECTFILE.yaml
players is an array, containing at minimum a host and video entry.
host: the hostname or ip of the Pi on the local network
videos: the local path(s) to video files to be sent to the Pi
This can be a single video, an array, or a glob pattern (like myvids/*.mp4).
The following settings are optional:
loop: should the playlist loop?
Can be true or false. Defaults to true.
random: play the videos in random order
Can be true or false. Defaults to false.
user: the username on the Pi
Defaults to pi.
gap: (TODO!) time in seconds to pause between each video (shows a black screen)
Defaults to 0.0.
start_at: (TODO!) start the playlist at a specific time.
Defaults to 0.0.
If you want to apply the same settings to all the Pi's, add a settings dictionary like so:
settings:
user: cooluser
random: true
gap: 2
These settings will be sent to all the Pi's listed in the players section (but individual player settings have precedence).
FAQs
A command line interface to help set up a raspberry pi as a video player.
We found that piplayer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.